VendorsWinduwindu_cmsall versions
Vulnerabilities

Windu CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2013-7473
Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account.
Published 2019-08-01 · Modified
8.8EPSS 0.006
CVE-2025-59113
Bruteforce Protection Bypass in Windu CMS
Published 2025-11-18 · Modified
7.5EPSS 0.003
CVE-2025-59111
Broken Access Control in Windu CMS
Published 2025-11-18 · Modified
6.9EPSS 0.003
CVE-2025-59116
User enumeration in Windu CMS
Published 2025-11-18 · Modified
6.9EPSS 0.002
CVE-2025-59110
Cross-Site Request Forgery in Windu CMS
Published 2025-11-18 · Modified
6.8EPSS 0.002
CVE-2025-59112
Cross-Site Request Forgery in Windu CMS
Published 2025-11-18 · Modified
6.5EPSS 0.001
CVE-2025-59114
Cross-Site Request Forgery in Windu CMS
Published 2025-11-18 · Modified
6.5EPSS 0.001
CVE-2013-7474
Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users.
Published 2019-08-01 · Modified
6.1EPSS 0.008
CVE-2025-59115
Stored XSS in Windu CMS
Published 2025-11-18 · Modified
5.4EPSS 0.002
CVE-2025-59117
Multiple Stored XSS in Windu CMS
Published 2025-11-18 · Modified
4.8EPSS 0.002